Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: u2yCf4RgVA97Y4KQjsOQnAJz+9kigsHs23hz2qSQTSI=
Subject key identifier: E0:DB:52:66:FD:F8:B2:E4:06:1F:29:9D:85:8C:95:80:12:4B:13:7F
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 019A4DAA9541CD923CC48F276AC6B46FE952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:16 +0000
Manifest this update: Tue 04 Nov 2025 07:00:16 +0000
Manifest next update: Wed 05 Nov 2025 07:00:16 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: pFBS4SqEDOqO7g8tMe+eTj0RvvLQyO8nyp18LOgvOV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:95:41:cd:92:3c:c4:8f:27:6a:c6:b4:6f:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Nov 4 07:00:16 2025 GMT
Not After : Nov 5 07:00:16 2025 GMT
Subject: CN=e0db5266fdf8b2e4061f299d858c9580124b137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:08:8b:47:b1:dd:c5:cb:c5:37:98:49:4f:
27:24:d4:09:14:75:e9:c8:b2:0c:47:62:23:87:34:
7d:8b:e6:bf:98:f3:a1:c9:a5:80:b0:da:3d:b3:7b:
ab:f1:f2:88:e1:a0:02:e3:26:4c:be:f5:c3:34:12:
be:a0:ca:d8:8e:af:6e:6d:84:ea:af:b1:11:a2:70:
66:6d:7d:ca:db:ab:ac:c7:5f:fe:d1:54:d2:c4:6c:
10:ba:93:70:f2:5c:e5:94:69:b3:2c:29:1d:77:df:
e8:1e:bc:70:90:6d:a1:3c:07:66:68:e6:e2:f8:c5:
3b:df:73:47:46:b3:76:cd:89:3f:7e:c2:59:c5:38:
91:75:00:b1:41:f8:ce:c8:84:16:da:80:ca:d8:48:
d3:1b:0a:57:0f:76:be:35:ac:12:fa:f6:15:9a:fc:
a6:45:28:1e:da:95:71:c7:f2:b8:2a:9b:d7:23:5b:
ec:f9:ea:be:fb:7f:08:f5:41:72:b7:67:d9:2f:11:
a3:19:61:52:4f:6d:d3:7c:8e:8d:27:12:1c:87:1a:
4f:7e:60:ca:a9:4c:2d:4e:a4:d0:70:b4:ec:0d:dd:
5f:e9:a1:92:18:6a:80:11:9f:72:84:d6:a3:0f:b3:
f7:3e:1a:39:0d:b8:e8:9f:fa:89:80:17:f9:e8:18:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DB:52:66:FD:F8:B2:E4:06:1F:29:9D:85:8C:95:80:12:4B:13:7F
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1c:1d:de:8a:a7:11:5c:52:9c:5b:1d:7a:ee:a3:2d:04:fe:
bc:48:4e:0e:c6:8b:8b:01:29:2d:eb:36:3d:25:a8:b7:b0:b1:
2b:d1:c2:62:1f:b6:1b:a3:51:26:21:5c:9d:5b:5e:29:54:de:
e7:f1:e3:13:2f:22:ac:b7:78:08:4e:7a:75:94:c1:12:59:9b:
82:39:ad:49:65:54:42:83:df:36:18:eb:cb:11:63:57:c4:82:
11:e7:56:42:1f:9c:8e:fe:21:44:c0:93:0f:36:b9:64:d6:b6:
2b:9e:6b:6e:e0:4b:0e:b3:8d:eb:af:7d:9f:ad:87:72:de:70:
92:24:bf:27:ca:23:48:13:c5:2a:fc:72:5e:2c:82:9f:08:01:
3a:68:1e:a1:36:42:79:28:ba:6a:65:0d:1d:27:1c:d3:9b:28:
ce:58:a4:25:3a:fe:af:36:9a:78:4d:6c:96:25:c7:28:9c:74:
ca:f7:bf:49:b9:92:a3:9a:ca:42:7c:f9:a7:ee:39:14:8d:c9:
c3:c0:1b:93:a5:ba:f2:ac:c1:2a:70:70:18:a7:b4:4f:25:ec:
81:08:1e:5d:83:28:ac:6e:c3:77:63:9c:35:b6:8d:89:97:a9:
74:55:29:04:66:87:01:fd:34:8c:8f:e2:22:60:22:df:86:34:
44:42:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:08 2025 by rpki-client